Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa
File:                     9f2edf65-5a81-3398-a778-390d80403861.roa (raw, json)
Hash identifier:          BQlBhaxGzQyy4YmT2rucdNftgeAGM3Npu0z41Ihjh/w=
Subject key identifier:   D0:23:49:49:C5:01:FB:38:D5:77:56:F1:5A:55:30:84:1A:84:85:4E
Certificate issuer:       /CN=6ce6a780-3db7-4d76-a9eb-20b6247f5f36
Certificate serial:       010D0C9F4328584D492A80C79D9AF984644E7080
Authority key identifier: 8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     13942
IP address blocks:        205.236.20.0/23 maxlen: 23
                          205.236.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:80:c7:9d:9a:f9:84:64:4e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce6a780-3db7-4d76-a9eb-20b6247f5f36
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=63f8f096-3396-495f-916d-4dd01e1c1017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:96:a4:d7:26:21:5d:53:68:e3:d8:d2:66:
                    d4:e0:7f:19:06:9e:a5:0e:49:ba:e7:42:1e:d2:4b:
                    7f:40:77:52:c7:3d:e4:c3:25:34:3d:63:a9:84:2b:
                    34:31:de:3b:bf:bf:b4:d8:0d:03:f1:8e:0f:b1:8d:
                    cc:85:e4:b3:12:6a:8b:4c:a7:d9:ff:aa:d7:67:a3:
                    ad:ca:c8:72:99:ee:77:89:ce:52:bf:b4:bd:c0:f1:
                    55:f7:8e:6a:c9:54:ff:4a:56:a5:1d:e2:a7:c0:bc:
                    7b:aa:26:9a:dd:32:8e:fa:8f:9f:44:81:57:6d:4c:
                    7c:9a:c2:05:f3:8f:03:27:c5:4c:6b:c8:9c:f8:46:
                    8d:c5:44:61:bf:92:47:34:3e:8c:c3:f0:83:d8:a4:
                    fe:e8:9b:95:2a:a5:20:d6:35:a9:df:c2:d8:b6:10:
                    10:ce:78:cf:5d:77:67:5a:48:09:77:73:1c:f1:10:
                    04:2c:80:0d:de:3e:61:65:39:ba:bd:c9:ec:95:3e:
                    79:cc:65:8d:76:5e:3a:17:28:27:8b:cd:55:96:45:
                    fc:41:56:ee:1b:2b:79:6c:b2:2d:00:1b:5a:88:30:
                    0d:f7:16:fe:e9:78:82:73:b5:79:3f:e2:8c:68:03:
                    51:86:0d:d0:8d:fb:fc:20:ed:d4:55:57:31:db:19:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:23:49:49:C5:01:FB:38:D5:77:56:F1:5A:55:30:84:1A:84:85:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/9f2edf65-5a81-3398-a778-390d80403861.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1D:5A:A4:18:B2:FA:CA:0B:94:BC:6A:94:9F:B7:FC:8E:1F:CF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6ce6a780-3db7-4d76-a9eb-20b6247f5f36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.236.20.0-205.236.22.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:df:ba:9c:f8:4e:ea:da:22:2f:35:fd:31:03:d5:9e:aa:1b:
         e0:e3:26:e8:4f:20:31:88:79:fe:93:45:78:9a:ab:62:3c:68:
         24:00:ae:77:86:a4:75:77:93:94:96:f8:22:32:89:0f:0a:c4:
         a1:27:19:c9:71:74:88:b2:59:ed:39:b7:70:59:48:98:3a:a6:
         54:51:99:43:7f:28:f7:9b:9b:02:b2:06:a9:cc:5c:17:b7:50:
         7b:6f:aa:56:c5:ed:99:6c:46:82:2f:d3:f7:c3:74:c0:cf:1e:
         2a:72:0b:f9:17:53:9d:d9:ab:9b:01:20:f7:fc:2e:5e:c8:a5:
         df:1b:0d:42:a6:72:92:3c:1f:63:33:08:c9:08:f2:f3:16:ea:
         a3:64:cb:8c:fc:af:e0:fa:61:92:d3:5d:e1:46:37:00:b7:8d:
         47:91:5d:e1:6c:56:5f:9b:b8:75:76:3a:dd:4a:a7:f0:6c:5f:
         e7:4a:e5:82:a0:73:8d:18:02:2a:8c:c0:2f:df:24:92:85:c5:
         e0:9f:3c:b4:c9:43:fa:55:87:f2:e9:32:a0:09:de:e0:e8:a8:
         4b:d9:be:be:8c:66:55:37:ea:38:46:8f:93:a7:9c:0b:a4:a3:
         a1:78:cd:d3:c0:7e:f1:1b:cd:cb:be:3b:c3:bc:66:2f:35:af:
         93:3d:e0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:29:02 2026 by rpki-client